On Tue, Dec 19, 2006 at 06:31:47PM -0500, Jeffrey Hutzelman wrote: > > Certs w/o PKINIT SANs can be used with PKINIT... > > Yes, but you can't match your principal name against their PKINIT SAN's to > decide which one to use. So you'd need some other approach. Well, you could try 'em all! Particularly if you know what principal you want to be.